Some checks failed
SonarQube / SonarQube (push) Failing after 5m28s
E2e test on main branch push / server and client test (map[name:admin port:8080]) (push) Failing after 3m33s
Server and lib tests / Library test (js) (push) Failing after 1m36s
Server and lib tests / Library test (vue) (push) Successful in 2m24s
Server and lib tests / Web client test (admin) (push) Successful in 2m52s
Server and lib tests / Web client test (compose) (push) Successful in 3m23s
Server and lib tests / Web client test (discovery) (push) Successful in 2m49s
Server and lib tests / Web client test (one) (push) Successful in 2m52s
Server and lib tests / Web client test (privacy) (push) Successful in 2m44s
Server and lib tests / Web client test (reporter) (push) Successful in 2m56s
Server and lib tests / Web client test (workflow) (push) Successful in 3m0s
Server and lib tests / Server tests (push) Failing after 4m55s
E2e test on main branch push / notify-failure (push) Failing after 9s
Server and lib tests / Send matrix testing notification (push) Successful in 2s
Mark stale issues and pull requests / stale (push) Successful in 40s
170 lines
4.5 KiB
YAML
170 lines
4.5 KiB
YAML
# List of loggable service actions
|
|
|
|
resource: system:user
|
|
service: user
|
|
|
|
# Default sensitivity for actions
|
|
defaultActionSeverity: notice
|
|
|
|
# default severity for errors
|
|
defaultErrorSeverity: alert
|
|
|
|
import:
|
|
- github.com/cortezaproject/corteza/server/system/types
|
|
|
|
props:
|
|
- name: user
|
|
type: "*types.User"
|
|
fields: [ handle, email, name, username, ID ]
|
|
- name: new
|
|
type: "*types.User"
|
|
fields: [ handle, email, name, username, ID ]
|
|
- name: update
|
|
type: "*types.User"
|
|
fields: [ handle, email, name, username, ID ]
|
|
- name: existing
|
|
type: "*types.User"
|
|
fields: [ handle, email, name, username, ID ]
|
|
- name: filter
|
|
type: "*types.UserFilter"
|
|
fields: [ query, userID, roleID, handle, email, username, deleted, suspended, sort ]
|
|
|
|
actions:
|
|
- action: search
|
|
log: "searched for matching users"
|
|
severity: info
|
|
|
|
- action: lookup
|
|
log: "looked-up for a {{user}}"
|
|
severity: info
|
|
|
|
- action: create
|
|
log: "created {{user}}"
|
|
|
|
- action: update
|
|
log: "updated {{user}}"
|
|
|
|
- action: delete
|
|
log: "deleted {{user}}"
|
|
|
|
- action: undelete
|
|
log: "undeleted {{user}}"
|
|
|
|
- action: suspend
|
|
log: "suspended {{user}}"
|
|
|
|
- action: unsuspend
|
|
log: "unsuspended {{user}}"
|
|
|
|
- action: setPassword
|
|
log: "password changed for {{user}}"
|
|
|
|
- action: removePassword
|
|
log: "password removed for {{user}}"
|
|
|
|
- action: deleteAuthTokens
|
|
log: "deleted auth tokens of {{user}}"
|
|
|
|
- action: deleteAuthSessions
|
|
log: "deleted auth sessions of {{user}}"
|
|
|
|
- action: uploadAvatar
|
|
log: "uploaded avatar of {{user}}"
|
|
|
|
- action: generateAvatar
|
|
log: "generated avatar of {{user}}"
|
|
|
|
- action: deleteAvatar
|
|
log: "deleted avatar of {{user}}"
|
|
|
|
errors:
|
|
- error: notFound
|
|
message: "user not found"
|
|
severity: warning
|
|
|
|
- error: invalidID
|
|
message: "invalid ID"
|
|
severity: warning
|
|
|
|
- error: invalidHandle
|
|
message: "invalid handle"
|
|
severity: warning
|
|
|
|
- error: invalidEmail
|
|
message: "invalid email"
|
|
severity: warning
|
|
|
|
- error: staleData
|
|
message: "user was modified by someone else or by a workflow after you've opened it. Please refresh to see the latest updated version"
|
|
severity: warning
|
|
|
|
- error: notAllowedToRead
|
|
message: "not allowed to read this user"
|
|
log: "failed to read {{user.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToSearch
|
|
message: "not allowed to list or search users"
|
|
log: "failed to search for users; insufficient permissions"
|
|
|
|
- error: notAllowedToListUsers
|
|
message: "not allowed to list users"
|
|
log: "failed to list user; insufficient permissions"
|
|
|
|
- error: notAllowedToCreate
|
|
message: "not allowed to create users"
|
|
log: "failed to create users; insufficient permissions"
|
|
|
|
- error: notAllowedToCreateSystem
|
|
message: "not allowed to create system users"
|
|
log: "failed to create system users"
|
|
|
|
- error: notAllowedToUpdate
|
|
message: "not allowed to update this user"
|
|
log: "failed to update {{user.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToUpdateSystem
|
|
message: "not allowed to update system users"
|
|
log: "failed to update system users"
|
|
|
|
- error: notAllowedToDelete
|
|
message: "not allowed to delete this user"
|
|
log: "failed to delete {{user.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToUndelete
|
|
message: "not allowed to undelete this user"
|
|
log: "failed to undelete {{user.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToSuspend
|
|
message: "not allowed to suspend this user"
|
|
log: "failed to suspend {{user.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToUnsuspend
|
|
message: "not allowed to unsuspend this user"
|
|
log: "failed to unsuspend {{user.handle}}; insufficient permissions"
|
|
|
|
- error: handleNotUnique
|
|
message: "handle not unique"
|
|
log: "used duplicate handle ({{user.handle}}) for user"
|
|
severity: warning
|
|
|
|
- error: emailNotUnique
|
|
message: "email not unique"
|
|
log: "used duplicate email ({{user.email}}) for user"
|
|
severity: warning
|
|
|
|
- error: usernameNotUnique
|
|
message: "username not unique"
|
|
log: "used duplicate username ({{user.username}}) for user"
|
|
severity: warning
|
|
|
|
- error: passwordNotSecure
|
|
message: "provided password is not secure; use longer password with more special characters"
|
|
|
|
- error: maxUserLimitReached
|
|
message: "you have reached your user limit, contact your Corteza administrator"
|
|
severity: warning
|
|
|
|
- error: notAllowedToDeleteAvatar
|
|
message: "not allowed to delete avatar for this user"
|
|
log: "failed to delete {{user.handle}}'s avatar; insufficient permissions"
|